Just to add to CPagan's answer (I'm not allowed to comment)... Before nuking your key (when a raid is expected or you're about to travel with sensitive data), there is no need to backup the entire drive. Only back up the header of the encrypted volume - it is tiny. For example: cryptsetup luksHeaderBackup…
Cyber Security
Answered Mar 14, 2022
·
482 Views
Read answer →
While anyone using a OTP token should allow you to configure more than one token source (at least two so you can have a secured yubikey backup), not all do. If all of your places will let you enroll two authenticator apps, then just enroll one on each YubiKey (I'd recommend sticking with a 5 for the backup as well, so…
Cyber Security
Answered Mar 14, 2022
·
551 Views
Read answer →
Let me split up your questions and hopefully it will make sense... When I use my VPN (ExpressVPN) connecting to a site that use only http, is that something i need to worry about? A VPN is an encrypted tunnel between your computer and the VPN end point, in this case the ExpressVPN servers in the country you connect…
Cyber Security
Answered Mar 14, 2022
·
592 Views
Read answer →
I have noticed SPAM which meets this description i.e spam that comes from names in my address book, but not their email addresses, and which I infer is the result of address book compromises of people who have me in their contacts. For half a dozen of my acquaintances, I began receiving SPAM with the following…
Cyber Security
Answered Mar 14, 2022
·
732 Views
Read answer →
7zip encryption is designed to protect archived files. So, as long as the tool designers did their job well, you are safe for the second case (somebody getting his hand on the encrypted file and trying to crack it). However, such utility are not designed to protect you against your first mentioned case (someone…
Cyber Security
Answered Mar 14, 2022
·
1.1K Views
Read answer →
Godaddy-hosted email (if you choose to host your email through godaddy) is hosted under the "secureserver net" domain. In fact, the addresses you configure into your mail client are pop.secureserver.net, imap.secureserver.net, smtp.secureserver.net, etc. If you configured your Godaddy webmail (for perhaps some other…
Cyber Security
Answered Mar 14, 2022
·
496 Views
Read answer →
In this kind of case, the answer to the question - how to access old phone numbers is that contacting the support of the company would be the only option left. A support staff will be able to escalate it to support engineers that will manually reset your account for you, or update your mobile phone number to the…
Cyber Security
Answered Mar 14, 2022
·
601 Views
Read answer →
Port 5060 is normally assigned to SIP traffic. It might or might not be used for SIP however. A simple nmap scan to this destination should probably reveal much more, for example here's an output from a OS fingerprint nmap scan to a voip adapter nmap -v -O ... Host is up (0.0026s latency). Not shown: 999 closed ports…
Cyber Security
Answered Mar 11, 2022
·
1.1K Views
Read answer →
PEAP vs EAP-TLS On EAP-TLS you are right, both sides require a certificate. With a client-side certificate, a compromised password is not enough to break into EAP-TLS enabled systems because the intruder still needs to have the client-side certificate. On EAP-TTLS, you are right again. After the server is securely…
Cyber Security
Answered Mar 11, 2022
·
1.1K Views
Read answer →
There are a number of ways to test SQL injection for vulnerabilities. The tests break down into three different methodologies: Blind Injection: MySQL example:http://localhost/test.php?id=sleep(30) If this SQL statement is interpreted by the database then it will take 30 seconds for the page to load. Error Messages:…
Cyber Security
Answered Mar 11, 2022
·
657 Views
Read answer →
Cookies can be used for a variety of reasons. At the simplest level it might contain a random number that advises the site that you are the same person that visited previously, either for tracking purposes or to provide enhanced functionality such as user preferences. Such cookies do not need to be encrypted. Cookie…
Cyber Security
Answered Mar 11, 2022
·
564 Views
Read answer →
The answer to - Is Linux more secure than Windows is that Linux isn't really more secure than Windows. It's really more a matter of scope than anything. No matter what malware, exploits, and bad users exist EVERYWHERE. One being more secure than the other is nothing more than anecdotal evidence. Malware exists for…
Cyber Security
Answered Mar 10, 2022
·
748 Views
Read answer →